This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft File: XNaRDPHi4rHKNHPEt9CSAg57fGE.mft (raw, json) Hash identifier: XjOXfVpz/CQlBd9aSPz36/itAL0lr2JLK8eDeMEPK5Q= Subject key identifier: 9E:7C:91:52:91:5E:07:59:0F:2E:CB:AC:16:00:33:CB:7B:AD:35:D5 Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61 Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61 Certificate serial: 019BF79AA1A897D3C4C919239114B749C41E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft Manifest number: 177A Signing time: Mon 26 Jan 2026 00:01:04 +0000 Manifest this update: Mon 26 Jan 2026 00:01:04 +0000 Manifest next update: Tue 27 Jan 2026 00:01:04 +0000 Files and hashes: 1: 1-JQqdOgGI5A2jgfNA9GBznLZL4o.roa (hash: 8aD9D5dY520w/e92POgprpQwJQRjt7y1yNeMs6zlp6Y=) 2: XNaRDPHi4rHKNHPEt9CSAg57fGE.crl (hash: DkLIFE9W38P4fl5KS41kH2Qb/A69muducrZ43PgUcvs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f7:9a:a1:a8:97:d3:c4:c9:19:23:91:14:b7:49:c4:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61 Validity Not Before: Jan 26 00:01:04 2026 GMT Not After : Jan 27 00:01:04 2026 GMT Subject: CN=9e7c9152915e07590f2ecbac160033cb7bad35d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bf:15:f4:be:ff:ef:b9:d2:08:c7:99:e0:0d: e8:32:ac:9e:9d:5a:53:72:95:66:78:aa:4e:52:2f: 21:68:bc:f7:37:46:c7:d2:ca:8e:ef:22:0b:8e:e3: e5:16:63:db:98:c4:e2:f2:a8:66:eb:f9:0c:41:30: 93:6b:55:c4:4f:5c:3d:86:fc:ef:c7:a6:4f:66:7d: ed:61:0e:97:3d:a4:15:06:76:86:1e:8e:ea:3f:84: 2b:c1:2c:42:a5:68:8c:c7:d8:42:d7:ad:a7:c4:d0: 5c:71:9e:79:55:d5:c7:1c:93:80:d7:e1:82:00:17: 87:4d:b8:91:dd:13:9c:7f:a0:e5:74:8d:96:c4:31: 5d:fb:56:06:e3:e3:81:28:cb:ec:7f:8e:51:89:5a: 80:55:30:1b:14:67:3d:2f:23:b1:0c:30:8e:ec:d7: fa:b4:29:38:ea:c1:4d:80:2e:de:2b:26:f3:5e:19: 25:63:03:13:59:08:dd:1c:d6:17:ca:1e:f9:33:51: a9:63:2e:09:7f:fe:72:74:e5:50:fc:c6:cb:f9:8b: f4:71:61:b2:33:90:33:ba:53:4b:e5:df:b6:97:ab: 5d:96:c9:07:bb:d0:dc:a3:fe:ac:d1:1f:07:c8:a3: a8:c4:52:77:0d:c6:bf:bb:c1:ae:37:44:b5:44:94: 2d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:7C:91:52:91:5E:07:59:0F:2E:CB:AC:16:00:33:CB:7B:AD:35:D5 X509v3 Authority Key Identifier: keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:32:48:b1:de:6e:2b:01:51:65:24:0a:e1:a4:34:f0:32:84: e4:c9:47:fe:4f:41:c8:f4:62:f9:57:09:3a:ee:9d:07:f8:d9: 8a:b5:86:73:20:98:07:3c:32:3f:38:9e:da:30:3f:f1:2b:40: 0d:3f:18:63:f1:f0:e1:f6:96:ed:7f:f9:93:9d:03:b6:49:cf: 20:09:d8:2c:df:85:ba:79:8e:77:3d:7a:b6:a0:a1:c4:d4:dc: e9:78:23:64:65:dd:16:82:13:b8:03:2e:5f:f8:9c:f0:d0:69: 65:c7:04:5c:cd:9e:ce:3c:08:8f:97:5e:c3:b4:60:19:52:a1: 7b:2b:f7:31:d7:76:cb:1a:88:31:b8:b8:d6:d5:d0:65:13:e2: 71:3d:d8:69:2c:a0:96:4a:17:87:96:93:8c:ec:e4:bc:e5:90: 9d:2e:6b:a6:f9:5c:59:e6:66:dd:4a:84:93:29:cf:2f:41:91: 3b:eb:ea:23:0d:75:fc:bc:21:f2:10:af:41:f2:fa:0e:ae:3b: ec:26:21:fd:ea:1b:c0:cd:cf:14:30:a9:24:72:cf:66:cd:21: 19:ed:5e:b3:db:c2:a6:71:53:4d:60:7b:13:90:43:d2:10:ec: b1:e1:c2:30:8c:7b:91:35:62:b0:1e:bc:a3:cd:4a:82:f3:0e: 70:c4:3c:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZv3mqGol9PEyRkjkRS3ScQeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVjZDY5MTBjZjFlMmUyYjFjYTM0NzNjNGI3ZDA5MjAyMGU3 YjdjNjEwHhcNMjYwMTI2MDAwMTA0WhcNMjYwMTI3MDAwMTA0WjAzMTEwLwYDVQQD Eyg5ZTdjOTE1MjkxNWUwNzU5MGYyZWNiYWMxNjAwMzNjYjdiYWQzNWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAub8V9L7/77nSCMeZ4A3oMqyenVpT cpVmeKpOUi8haLz3N0bH0sqO7yILjuPlFmPbmMTi8qhm6/kMQTCTa1XET1w9hvzv x6ZPZn3tYQ6XPaQVBnaGHo7qP4QrwSxCpWiMx9hC162nxNBccZ55VdXHHJOA1+GC ABeHTbiR3ROcf6DldI2WxDFd+1YG4+OBKMvsf45RiVqAVTAbFGc9LyOxDDCO7Nf6 tCk46sFNgC7eKybzXhklYwMTWQjdHNYXyh75M1GpYy4Jf/5ydOVQ/MbL+Yv0cWGy M5AzulNL5d+2l6tdlskHu9Dco/6s0R8HyKOoxFJ3Dca/u8GuN0S1RJQt/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ58kVKRXgdZDy7LrBYAM8t7rTXVMB8GA1UdIwQY MBaAFFzWkQzx4uKxyjRzxLfQkgIOe3xhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWE5hUkRQSGk0ckhLTkhQRXQ5Q1NBZzU3ZkdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8xZDJiODctMGRlMy00ZjkzLWFkNjQt MTcyYzYwYjNlMzZkLzEvWE5hUkRQSGk0ckhLTkhQRXQ5Q1NBZzU3ZkdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8xZDJiODctMGRlMy00ZjkzLWFkNjQtMTcyYzYwYjNlMzZk LzEvWE5hUkRQSGk0ckhLTkhQRXQ5Q1NBZzU3ZkdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiDJIsd5u KwFRZSQK4aQ08DKE5MlH/k9ByPRi+VcJOu6dB/jZirWGcyCYBzwyPzie2jA/8StA DT8YY/Hw4faW7X/5k50DtknPIAnYLN+FunmOdz16tqChxNTc6XgjZGXdFoITuAMu X/ic8NBpZccEXM2ezjwIj5dew7RgGVKheyv3Mdd2yxqIMbi41tXQZRPicT3YaSyg lkoXh5aTjOzkvOWQnS5rpvlcWeZm3UqEkynPL0GRO+vqIw11/Lwh8hCvQfL6Dq47 7CYh/eobwM3PFDCpJHLPZs0hGe1es9vCpnFTTWB7E5BD0hDsseHCMIx7kTVisB68 o81KgvMOcMQ8yQ== -----END CERTIFICATE-----Generated at Mon Jan 26 06:23:38 2026 by rpki-client